If you have spent any time in credit forums, Facebook groups, or Quora threads about building credit without an SSN, you have probably seen the pitch. Someone offers a “credit privacy number” or a “new credit file,” usually for a few hundred dollars, sometimes with “tradelines included.” The pitch is aimed straight at ITIN holders, because sellers know immigrants without an SSN are searching for a way into the U.S. credit system and may not know which doors are real.
Here is the short version before we get into the details: an ITIN is a legitimate IRS tax ID and building credit with it is legal. A CPN is a fraud product. There is no gray area between the two, and confusing them can cost you money, your credit file, or in the worst case a criminal charge.
What is a CPN, exactly?
CPN stands for “credit privacy number” or “credit profile number,” depending on which seller you ask. It is marketed as a nine-digit number you can use in place of your SSN on credit applications, supposedly to start a fresh credit file or keep your “real” identity private.
No such number exists in U.S. law. The Social Security Administration does not issue CPNs. Neither does the IRS, the credit bureaus, or any other agency. The Federal Trade Commission has warned for years that companies selling “new credit identities” are running a scam, and that the number you receive is frequently a real Social Security number stolen from someone else, often a child, a prison inmate, or a deceased person.
That last part deserves a moment. Javelin Strategy & Research’s child identity fraud study found that identity fraud hits roughly one in fifty U.S. children and costs affected families over $900 million a year. Stolen children’s SSNs are attractive to CPN mills precisely because a child’s number sits unused for years, so a fraudulent file built on it can go undetected for a long time. When you buy a CPN, there is a real chance you are paying to borrow a child’s identity.
Some sellers claim their numbers are “legally created” through the SSA’s randomization system, or that attorneys generate them, or that celebrities use them to protect their privacy. Sellers repeat these claims because they sound plausible. None of them hold up. There is no legal mechanism for a private company to generate a valid nine-digit identifier that lenders must accept.
What is an ITIN, and how is it different?
An Individual Taxpayer Identification Number is a real tax processing number the IRS has issued since 1996 to people who have U.S. tax obligations but do not qualify for a Social Security number. It always starts with a 9 and is formatted like an SSN (9XX-XX-XXXX). You apply for one with IRS Form W-7, attaching proof of identity and your federal tax return. The IRS reviews the application and mails you an assignment letter. The whole process is documented on irs.gov and costs nothing beyond what a Certifying Acceptance Agent charges if you use one.
The difference that matters for your credit: an ITIN is verifiable. When you apply for a secured card or a credit-builder loan with a lender that accepts ITINs, you are telling the lender the truth about who you are. Experian, Equifax, and TransUnion can all maintain a credit file for an ITIN holder, and payment history reported under your ITIN builds a genuine score. Our guide to building credit history with an ITIN walks through the full path, and if you do not have a number yet, start with how to get an ITIN.
| ITIN | CPN | |
|---|---|---|
| Issued by | IRS, a federal agency | Private sellers, no agency |
| Legal to use on credit applications | Yes, with lenders that accept ITINs | No. Using it in the SSN field is fraud |
| Cost | Free from the IRS | $200 to several thousand dollars |
| What the number actually is | A tax ID assigned to you | Often a stolen or fabricated SSN |
| Credit file | Real file at all three bureaus | Fake file that collapses under verification |
| Risk to you | None | Criminal exposure, lost money, closed accounts |
Is a CPN legal?
This is the question the sellers work hardest to muddy, so here is the plain answer: there is no law that creates or recognizes CPNs, and using one where a lender asks for your SSN violates several federal statutes at once.
False representation of a Social Security number is a felony under 42 U.S.C. § 408, punishable by up to five years in prison. Knowingly making a false statement on a loan or credit application to a federally insured institution falls under 18 U.S.C. § 1014, which carries penalties of up to 30 years for the most serious cases. If the CPN turns out to be someone else’s SSN, identity theft statutes come into play on top of that. The Justice Department has prosecuted CPN operations repeatedly, and the defendants in those cases have included buyers who used the numbers, along with the people who sold them.
Sellers lean on a privacy-sounding argument: that you have a right to withhold your SSN, so substituting another number is fine. The first half is true in a narrow sense. You can decline to give a private business your SSN. What you cannot do is hand them a different nine-digit number and let them believe it is your SSN. Declining to answer is a right. Answering falsely is fraud.
There is also a consumer protection layer here. The Credit Repair Organizations Act specifically prohibits credit repair companies from advising you to alter your identification to hide your credit history, and it bans charging you before services are performed. A CPN seller violates both on day one.
How does the CPN scam actually play out?
The sales funnel is consistent enough that you can describe it in advance. The seller finds you in a credit-building thread or runs ads targeting “no SSN” and “second chance credit” searches. Prices run from a couple hundred dollars for the number alone to several thousand for a package with “aged tradelines” and coaching on how to fill out applications. The coaching usually includes instructions to use a new address and phone number, which is itself a tell. You are being taught to defeat identity verification, and honest products never require that.
For a while, it can look like it works. A lender with weak verification approves a small account under the fake profile. Then the file meets its first serious check. Lenders cross-reference SSN issuance records, and bureaus flag files with no history that suddenly carry borrowed tradelines. Accounts get closed and applications start bouncing off fraud indicators. Whatever “score” the file had evaporates. The seller is long gone by then, and their customer is the one whose name is on every application.
The person hit hardest is often the one whose SSN got resold. If you want to understand what that side of it looks like, our guide on identity theft and your ITIN credit file covers how stolen identities surface on credit reports and how victims dig out.
What should you do instead of buying a CPN?
The frustrating truth about the CPN pitch is that it targets people who already have a legal path and may not know it. If you have an ITIN, you do not need a workaround. The real route is slower than the fantasy the seller describes. It is also permanent, and it belongs to you.
The sequence that works: open a secured credit card that accepts ITIN applicants, then add a credit-builder loan so your file shows both revolving and installment history. Keep utilization low and let the on-time payments accumulate. A first score usually appears within six months of your first reported account. Our full walkthrough of how to build credit with an ITIN number covers each step, including which lenders report to all three bureaus.
Nothing about that process requires lying to anyone, and every point of progress survives verification because there is nothing to find.
What if you already bought or used a CPN?
Stop using the number today. Do not put it on another application, and do not try to “finish building” the file so the money was not wasted. Every additional application is a separate false statement.
Report the seller at ReportFraud.ftc.gov, and at IdentityTheft.gov if your own personal information was misused along the way, which happens often since sellers collect exactly the documents an identity thief wants. If you already submitted applications using the CPN, talk to a criminal defense or consumer attorney before you contact any lender. That is a specific legal situation and a lawyer should guide the cleanup, so we will leave the how-to there.
Then start the legal build. A real ITIN file at six months old beats a fake file of any age, because the fake one was always going to zero.
Frequently Asked Questions
Is a CPN ever legal to use? No federal or state agency issues CPNs, so there is no legal way to obtain one. Entering a CPN in the SSN field of a credit application misrepresents your identity to a lender, which is a federal crime regardless of what the seller told you. The FTC classifies CPN offers as credit repair fraud.
What is the difference between a CPN and an ITIN? An ITIN is issued by the IRS to people who need to file U.S. taxes but do not qualify for an SSN. It is legal and verifiable, and many lenders and all three credit bureaus accept it. A CPN comes from a private seller with no agency behind it, and the number itself is often a stolen or fabricated SSN.
Can I go to prison for using a CPN? Yes. Using a CPN in place of an SSN can be charged as false representation of a Social Security number and as a false statement on a credit application, with identity theft charges added when the number belongs to a real person. Federal prosecutors have brought cases against both CPN sellers and the people who used the numbers.
I already paid for a CPN. What should I do now? Stop using it immediately and do not put it on any new application. Report the seller at ReportFraud.ftc.gov. If the number turns out to be a real person’s SSN, or your own information was misused in the process, follow the recovery steps at IdentityTheft.gov. If you already used it on applications, talk to an attorney before doing anything else.
Can I build a real credit score with just an ITIN? Yes. All three credit bureaus can build a file under an ITIN, and lenders that accept ITIN applicants report your payment history the same way they would for an SSN holder. Secured cards and credit-builder loans both work, and so does rent reporting. It takes about six months of reported history to generate a first score.